$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d5cec686-1cd2-3678-a6d8-0836ca9bad8b.roa File: d5cec686-1cd2-3678-a6d8-0836ca9bad8b.roa (raw, json) Hash identifier: yrueUWJIyfmm6imWkuxTxtx8QHMe5wX1lPqjrv2leKE= Subject key identifier: 8F:59:CF:AB:66:81:BB:BF:5D:38:99:16:9F:B4:8C:15:80:06:34:DE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB51379B0AF8986688C240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d5cec686-1cd2-3678-a6d8-0836ca9bad8b.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 5714 IP address blocks: 66.54.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:51:37:9b:0a:f8:98:66:88:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=bd9ce542-f5b2-455a-8940-65fcd59bcfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:a2:93:02:da:7d:62:b1:62:35:a6:65:68: 36:54:8c:95:f9:7a:97:22:ff:a2:8c:ed:2a:9e:3d: e7:a8:b7:fa:68:5f:2c:24:21:2f:c6:f0:1b:06:50: 36:fc:b7:a5:3b:42:0c:76:2e:4d:cd:ae:8c:64:f9: ea:41:f4:58:ee:54:14:5a:fc:dc:00:f6:1c:18:f6: af:47:d3:05:43:54:6a:db:8d:b2:d9:c2:1b:65:88: 7d:b3:67:04:e5:07:ad:f4:ce:ed:ab:32:e2:c9:2e: 02:1b:03:2d:cb:10:d6:42:69:d5:e6:51:a2:d2:4f: f1:9d:93:d1:0a:72:41:d8:45:00:0e:03:0f:52:65: c7:2d:75:db:55:5f:c2:c5:a2:c7:de:61:d6:2b:97: a1:7d:16:3c:90:3f:84:01:23:18:9d:9e:2e:ee:8e: c5:0b:7e:bc:a9:02:ed:b7:30:06:c5:ea:ed:cc:a6: eb:53:ac:51:3e:3d:dd:c7:1f:85:31:48:d5:cb:4f: 7b:cf:d5:f3:50:53:51:ad:c4:8d:8e:bd:70:be:77: bf:bd:b9:60:74:77:b0:12:35:da:7d:a1:66:f4:ef: 08:da:d0:8c:8c:70:2b:fc:66:b8:f0:e5:f3:7c:e4: e1:4a:4e:8d:e2:d8:dd:bd:f9:3b:46:1f:c9:3a:96: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:59:CF:AB:66:81:BB:BF:5D:38:99:16:9F:B4:8C:15:80:06:34:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d5cec686-1cd2-3678-a6d8-0836ca9bad8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2f:85:19:43:c6:57:a4:06:97:67:1e:45:3f:a6:95:04:57: f2:d6:c0:9e:db:69:ed:6f:37:25:97:68:06:d8:0e:1f:97:d7: 49:7b:bf:64:ea:eb:7c:32:ca:4b:00:d4:c7:20:07:a7:88:d1: 2e:ef:a6:0f:28:c9:63:96:e1:07:b7:93:ed:60:79:dc:e3:c1: a9:a7:30:83:51:87:85:2f:b3:9a:ad:82:ba:33:f8:f8:39:4b: 30:7e:38:31:cf:45:b0:1a:de:e2:30:95:ba:89:82:04:3b:1e: 59:46:56:8b:f9:6d:1c:5f:1c:a8:8e:a3:69:60:01:94:06:20: e9:c2:2b:fe:a1:0a:86:ab:8b:c2:9f:c5:43:61:ed:50:4e:34: 10:5d:12:f5:d6:9d:1c:2e:ec:f4:24:53:b3:2f:aa:f3:13:4d: 75:55:9d:63:5a:17:fd:90:10:ef:48:f2:8a:78:46:8e:29:ee: 31:64:0c:48:f2:f3:63:31:e0:5c:ef:87:af:87:fb:6f:15:22: d7:87:08:1c:92:12:b0:99:09:4b:e9:07:37:50:98:4c:fa:f1: 0d:49:35:e1:ce:a7:5f:d9:a8:9f:6a:2d:33:fa:a8:37:42:11: a8:bb:29:cb:b0:40:82:01:d1:a4:2a:46:12:a2:32:ba:a3:b2: 64:b3:78:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1E3mwr4mGaIwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YmQ5Y2U1NDItZjViMi00NTVhLTg5NDAtNjVmY2Q1OWJjZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1SikwLafWKxYjWmZWg2VIyV+XqXIv+ijO0q nj3nqLf6aF8sJCEvxvAbBlA2/LelO0IMdi5Nza6MZPnqQfRY7lQUWvzcAPYcGPav R9MFQ1Rq242y2cIbZYh9s2cE5Qet9M7tqzLiyS4CGwMtyxDWQmnV5lGi0k/xnZPR CnJB2EUADgMPUmXHLXXbVV/CxaLH3mHWK5ehfRY8kD+EASMYnZ4u7o7FC368qQLt tzAGxertzKbrU6xRPj3dxx+FMUjVy097z9XzUFNRrcSNjr1wvne/vblgdHewEjXa faFm9O8I2tCMjHAr/Ga48OXzfOThSk6N4tjdvfk7Rh/JOpbgoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Zz6tmgbu/XTiZFp+0jBWABjTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDVjZWM2ODYtMWNkMi0z Njc4LWE2ZDgtMDgzNmNhOWJhZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQvhRlDxlekBpdnHkU/ppUEV/LWwJ7bae1vNyWXaAbYDh+X10l7v2Tq 63wyyksA1McgB6eI0S7vpg8oyWOW4Qe3k+1gedzjwamnMINRh4Uvs5qtgroz+Pg5 SzB+ODHPRbAa3uIwlbqJggQ7HllGVov5bRxfHKiOo2lgAZQGIOnCK/6hCoari8Kf xUNh7VBONBBdEvXWnRwu7PQkU7MvqvMTTXVVnWNaF/2QEO9I8op4Ro4p7jFkDEjy 82Mx4Fzvh6+H+28VIteHCBySErCZCUvpBzdQmEz68Q1JNeHOp1/ZqJ9qLTP6qDdC Eai7KcuwQIIB0aQqRhKiMrqjsmSzeP8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:18 2025 by rpki-client